Ref 
# 



Hits 



Hp 
Search Query 



EAST Search 



DBS 



Default 
Operator 



Plurals 



Time Stamp 



sill 



S2 



;: S '3 : ::; 



S5 



SiOi 



Sll 



S12; 

S13 

S14. 
S15 



S16 



;23r 



:"lden1aj! : ^::Sewite!!!:o;ri;!i::;;:::!j! 

deniaj$;ibf$iseryice: same;; 
(GoljeGtpr;ppagent)!;|;^ 



"denial of service" or 
denial$lof$lservice with (intru$4 
near2 detect$) 



L'.'denialiof ^service" 6r;;;:i:.;:: 
dehjai$ibf$lseivice|s^e; 'I 
(anpmaly$lbased!pr (anomaly; 
rie : ar2:detect$3)) : i: 



((intru$4 near2 detect$3) or 
denial-of-service or "denial of 
service") with bucket 



(denial-of-service or "denjal of 
; ;^etyice") Withcounter;;;; 



13 



; 1 
1 

i 

28 



18 



(denial-of-service or "denial of 
service") same redundan$2 



("6751668").PN: 



("20020131366").PN. 



("6662230").PN. : . 

"denial of service" or 
denial$lof$lservice same 
(collector or agent or sensor or 
inspector or actuator) 

(deniajrof-service or "denial of : . 
service" bf (intru$3; n^ar j; 
;deteri$3) j same redundan$2 ■ 



USrPGPUB; 

USPAT;.: 

EPO-iJPO; 

derwent; 

IBM_TDB 

US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT;; .: 
EPO; JPO; 
DERWENT; 

IBM TDB:- :; 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

USPAT; 
iUSOCR; 

US-PGPUB; 

USPAT; 

USOCR 

USPAT;: 
USOCR; 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; , . 
EPO; JPO; 
DERWENT; 
IBM.TDB 



OR 



OR 



OR; 



OR 



OR 



OR 



OR 
OR 

OR 
OR 



OR 



ON! 



ON 



0N : 



ON 



ON 



ON 



OFF 



OFF 



OFF 



ON 



ON 



20.05/05/08 15:46 



2005/05/08 15:47 



2005/05/08 16:26 



2005/05/08 16:26 



2005/05/08 16:26 



2005/05/08 16:26 



2004/10/24 15:54 



2004/10/24 15:54 



2004/i0/24 15:54 



2005/05/08 16:28 



2005/05/08.16:30 
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S17 



13 



;S18] 
S19 



810 



S20 



71 



S22 

:S23; 

S24 



18 

.7027 



3516 



S25 



382 



S26 



220 



redundan$2 with (harden$3 near2 
network) 



!;US^523i593-$ ; blD. iOR : : - -il 
US-6321263-^.pib. ! 

("denial of service" or 
denial$lof$lservice or (intru$3 
near detect$3)) same (collector or 
agent or sensor or inspector or 
actuator or sniffer) 

. ("denjalof seryice" or, 
deriial$iof$iseryice or;(intru$3j;; 
hear detects)) same!^ 
agent ipr inspector or actuator iprij: 
sniffer) : . . 

"6088804".URPN. 

: 713/i50-153488;201 ! ;709/224.;;L 

^cds/ : ;;-^:: : : : ! \;' : ';i 

713/150-153,188,201;709/224. 
eels, and ((collect$3 or audit$3 or 
log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) 

(7i3/150-153488^20i : ;70?/224^ 
ccjs. ahd (Cic!Ollect$3 or: audit$3:jol 
lbg$4; or m6hitdr$3) near3 
(network or;traffic or secur$3 prf 
statistic^ : bf colint or packet)) ) 
and ("denialijOf service" or | ; 
denial$iof$lservice or :(intru$4 J \ 
hear2 detect$))j : 

((713/150-153,188,201;709/224. 
eels, and ((collect$3 or audit$3 or 
log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) ) 
and ("denial of service" or 
denial$lof$lservice or (intru$4 
near2 detect$))) and (collector or 
agent or sensor or inspector or 
actuator) 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 

iUSPAt 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 

USPAT;;; : 

EPO; JPO; 
DERWENT; 
IBM^TDB : 

USPAT 

US-PGPUB; 

USPAT: 



US-PGPUB; 
USPAT 



US-PGPUB; 
USPAT i: 



US-PGPUB; 
USPAT 



OR 



or; 



OR 



OR 



OR 
OR 



OR 



OR 



OR 



ON 



ON 
ON 



ON 



ON 

on: 



ON 



ON; 



ON 



2005/05/08 16:31 



|20W/id/27ipi4 
2004/10/27 15:04 



2005/05/08 



14:31 



2005/05/08 16:33 
2064/10/29:2i^00! 



2004/11/03 13:04 



2004/10/29 21:06 



2004/10/29 21:06 



4/14/06 5:17:32 PM Page 2 

C:\Documents and Settings\MDinh\My Documents\EAST\Workspaces\09931558 Monitoring Network Traffic for DOS Attacks.wsp 



EAST Search History 



S27 


170 


((713/150-153,188,201;709/224. 
cds. and ((collect$3 or audit$3 or 
log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) ) 

dllU ^ UCIlidl Ul bClVILC Ul 

denial$lof$lservice or (intru$4 
near2 detect$))) and (collector or 
agent or inspector or actuator) 


US-PGPUB; 
USPAT 


OR 


ON 


2004/10/29 21:09 


; :;S28. 


;" : : 43 


(((7^ 

: eels;; and :((coll£ct$3. ! of ;aud|t$3:br ;| 


US-PGPUB; ! 
USPATp: 


OR; 


ON: v 


: 2005/05/08 16:34: 
















lbij$4;or : : mpnitpr$3) near3;:. ; 
(network or traffic or secur$3 or. : ; 
.^tii^ciz-or'douKt'bh packet)')'), ; 
arid ("denial of service" or ; : 


























denial$lof$lseryice or (intru$4 
hear2 detect$))) and (collector or 
agent or inspector or actuator)) 










S16 

1 
1 


2 


bucket with threshold same 

UU\> fx t L. Willi HII^OIIVIVJ OCI 1 1 . 

(combin$3 or divid$3 or split$4) 

bdlllC pdLrVCL 


USPAT 


OR 


ON 


2005/05/08 16:38 


S16 


3519 


713/i50 : 153;i88;201 ; ;709/224;::-- 


US-PGPUB; 


|P ; R|||||| 


!;ON : 


2004/11/03; 13:04 


■WW:: 




eels; and ((cbllect$3 or auclit$3! : orii : j 


USPAT : 










:l6g$4[bri riibriitor$3) 1near3 : 














^(network br.traffic or .secur$3 or r 
;statistic$;2 or count 6r; packet)):: V 






















JlU 

4 


c 


diiu ^uul.i\CL iicai j 

(combin$3 or divid$3 or split$4) 
with (threshold or limit)) 


USPAT 


OR 


ON 

win 


2005/05/08 16-40 


S16 




S162 and ((IP near3 fragment$5) 


■US-PGPUB;;- 


:or; : 


ON ' J 


2005/05/08:16:41 






: with- ("denial of ^service" or; = 


USPAT 










d^riial$iof$is^rVice)) ; ■■: : i; 










C1 £ 

9 




dxoz ano \\ir near 5 rragment$Dj 
with packet$) 


1 IC DflD\ ID- 

USPAT 


UK 


UIM 


ZUUD/UD/UO 10.^1 


S17 . 

= 2 


0 


:((ihtru$4 nearZ detect$3) or 
denial-of-service or "denial of ^ : 
service") same (reload riear2 : ; 
"request) 


US-PGPUB; 
USPAT. 


OR 


ON 


2005/05/08 16:43 


S17 
3 


15 


(bucket nearS (combin$3 or 
divid$3 or split$4)) same flow and 
nasn$i 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:44 


■.si7 : y 

S17 
6 


: *;- : -:?:: : :: : :::; : ::-7i : 


: ( IP nea r- frab merits 5Y with = attack : - 


US-PGPUB ^ 


OR '■ 


ON 


l: 2005/05/08 16-45 


1 


(over$llapping near2 fragment$5) 
with attack 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:46 


S17ii! 


- ^ 1: 


: ( , '6381;6pl^);PN.!;; : . 


lUSPAT; ••:=■• 




::0|E;', : :; : 


2004/1 1/03! 20:09 


i;:7:.;;: : ; :; ; 






USQGR =;• 
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C1 7 

9 


1 CO*3 


duckcl nearo iqiviq^o or spiiL> £ r or 
combin$3) 


1 IC D(ZO\ IQ< 

USPAT; 
cru, jru, 
DERWENT; 
IBM_TDB 


no 

UK 


UIN 


£UU*t/±1/Uj *iu.iu 


Si8l 




n bucket; | n ea r5; (d iy id$3 = or; sp | it$4 ; or i ; ; 


lUS-PGPUB;: 


OR::::::.:.:: 


:0N: :;::: 


i::2005/d5/Q8:i6 : l47: j 






conibm^ 


iiUSPAT;! ■■ T 
EPO; JPO; 














DERWENT; 

! IBM TDB: : ■ 








S18 
3 


1 


("6304262 M ).PN. 


USPAT 


OR 


OFF 


2004/11/04 11:55 


;S18 - 


82 


("denial of service" or - 


US-PGPUB;^ 


OR ; 


ON 


; 2005/05/08 14:35 






dehial$lc^iservice br;(intrU$3 [; j 
hear;det6ct$3)) same (collector or | 
agent or inspector or actuator or: 
sniffer) ; : 


USPAT; 
EPO; JPO; V 
DERWENT; 
: IBMJITJB 




























S18 
5 


38 


S184 and (@ad<"20000907" or 
@rlad<"20000907") 


US-PGPUB; 
USPAT; 

LrU, JrU, 

DERWENT; 
IBM TDB 


OR 


ON 


2005/10/04 11:57 


.S18 ; 

6 


: 12 


S185 and ((redundant or private 
or dedicated) near3 (network or 
; lirie)) V 


US-PGPUB; 
USPAT; 
EPO; JPO; v 


or::-: 


ON : 


2005/05/08 14:33 








DERWENT; 
IBM^TDB ; : 




















7 


■^7 


\ ciciiidi or service or 
Geniai$j.oT$iservice or ^tntru^j 
near detect$3)) same ((redundant 

(network or line or channel or 
tunnel)) 


EPO; JPO; 

DFRWFNT' 
IBM_TDB 


no 

UK 


UIM 




:S18:i; 




S187 and (@ad<"20000907" or 


US-PGPUB; 


OR : 


::0N 


: 2005/10/04 12:28 


•8 : ;-:t; 




; @rjad< M 20000907 u ) . 


USPAT; 
EPO; JPO; 1 






















DERWENT;,: 














IBM TDB 1 ; 








bio 
9 




"denial of service" or 
denial$lof$lservice same 
(collector or agent) 


- . x - 1 1- - 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2005/10/04 14:46 


S19 : 




"denial of ^eryice" 


: US-PGPUB; 


;0R I ;: ; 


;-ON ; ^:v; 


;; ; 2605/05/b8 15:47 j 


0 ; - 




: deniai$lof$lservice with (intru$4 
; hfebrZ de^ct$) 


USPAT . 
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S19 
1 



:S19: 



S19 
3 



S19 
4 



S19 
5 



;si9 

mm 



S19 
7 



S19 

8 : 

S19 
9 



16 



33 



21 



13 



20 



48 



"denial of service" or 
denial$lof$lservice same 
(anomaly$lbased or (anomaly 
near2 detect$3)) 



jj((ihtr^$4jriear2;dete^ 
: dehiairof-seryice "or "deniaj of 
service") with bucket ;; 1 ; 



(denial-of-service or "denial of 
service") with counter 



(denjal-of-service or "denial of 
service") same reduridan$2 



"denial of service" or 
denial$lof$lservice same 
(collector or agent or sensor or 
inspector or actuator) 

(denial^f-serviceipr "denial; of 
service" or 0htru$3 near | 
detect$3)) same::reduhdan$2 



redundan$2 with (harden$3 near2 
network) 



"6088804";URPN. 



(((713/150-153,188,201;709/224. 
eels, and ((collect$3 or audit$3 or 
log$4 or monitor$3) near3 
(network or traffic or secur$3 or 
statistic$2 or count or packet)) ) 
and ("denial of service" or 
denial$lof$lservice or (intru$4 
near2 detect$))) and (collector or 
agent or inspector or actuator)) 
and @ad<"20000907" 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



US-PGPUB; 



;USPAT; ; 
EPO; JPO; 
bERWENT; 
IBM TDB :: 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT; ;; 
EPO; JPO; 
DERWENT; 
IBM_TDB 



US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 

US-PGPUB; 
USPAT;: ■ 
EPO; JPO; 
DERWENT; 
IBMJTJB 

US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 



USPAT: 



US-PGPUB; 
USPAT 



OR 



OR 



OR 



OR 



OR 



OR- 



OR 



OR 



OR 



ON 



ON; 



ON 



ON 



ON 



ON ; 



ON 



ON 
ON 



2005/05/08 16:26 



2005/10/04 i4i52 



2005/05/08 16:26 



2005/05/08 16:26 



2005/10/04 14:56 



2005/05/08 16:30 



2005/05/08 16:31 



2005/05/08 16:33 
2005/10/04 15:02 
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con 
U 


1 "> 


bucket with threshold same 
(comDin$o or oivia$i or spnt$4) 
same packet 


US-PGPUB; 

UbrAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


lrtAr/iA/rtC 11,10 

2005/1U/U5 li:io 


i;s20 : 




; 713/i50-153;188 / 201;709/224;v-:i 


;;US : -PGPUB;:i 


DR 




:ON:^: 


: ;:2005/05/08: 16:40: 


f: ■ 




ifccl?: an;d ((<poMect$3 ;6r audit$3 ! br[;i : 


:iMSPjTf : '% 
















:;l6^$4 or m6nit6r$3)n£ar3. : 
(network or traffic or secur$3 or 














S20 
2 


5 


S201 and ( bucket near5 
(combin$3 or divid$3 or split$4) 
with (threshold or limit)) 


US-PGPUB • 
USPAT 


OR 


ON 


2005/05/08 16:40 


S20 T:: 


: (J 


:S201 : and((IP^ 


: US-PGPUB;]; 


!:or' : : ::.:.;;.; 


ON: : 


2005/05/08 16:41 


;;3 : 




: with : ("denial crf;service" or ; ;; ;; 


USPAT : .; 






































S20 
4 


48 


S201 and ((IP near3 fragment$5) 
with packet$) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:41 


i S20 

; 5 . . • 


•; : ::1:: ; 0 


;((ihtru$4 near2defebt$3) or 
denial-of-service or ;, :denial of ; 

■ service") same^elo^cl near2 
request) : ; 


US-PGPUB;- 
USPAT 


OR • 


on; ; 


; 2005/10/03 12:20;: 
















S20 
6 


16 


(bucket nearS (combin$3 or 
divid$3 or split$4)) same flow and 
hash$3 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:44 


: S20 

7 . : ; 


Wrl is.; 


: ; (If* near frag ment$5) with attack ; 


US-PGPUB; 
USPAT Li 


OR 




ON; j 


; 2005/05/08 16:45 


S20 
8 


2 


(over$llapping near2 fragment$5) 
with attack 


US-PGPUB; 
USPAT 


OR 


ON 


2005/05/08 16:46 


S20 
9 


•|;'.r:;8?'' 


; bucket nearS (divid$3 prisplit$4 or 
! tpmbin$3) samehash$3; 


US-PGPUB;- ; 
USPAT;;: 
EPO; JPO; '■■ 
DERWENT; 

ibm_tdb: 


OR 


ON 


; 1 2005/05/08; 16:47 


S21 
3 


10539 


((intru$4 near2 detect$3) or 
denial-of-service or "denial of 
service") 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2005/10/03 14:23 


S21 : 
4 


5925 : 


S213 and (@ad< 20000907 or. 
;@rlad<"2000d9p7") 


US-PGPUB; 

USPAT;;;!;:;: 
usocR;;;;: ; 

EPOj JPO; : 
DERWENT; : 
IBM TDB i 


OR 




ON';/:!': 


2005/1 


0/03 13:11 
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521 
5 


608 


S214 and ((separate private 
dedicated internal) near2 (channel 
network path line connection)) 


1 IC B^*OI ID ■ 

US-PGPUB; 

USPAT; 

USOCR; 

LrU, JrU, 

DERWENT; 
IBM_TDB 


OR 


ON 


2005/10/03 15:20 


;:S2 ; i: '■: 
6 




: S215 and ((datamear3 collect$3) ; 
wjth (packet traffic))! h;: : 


;US-PGPUB;I 
USPAT;: n 
USOCR;;; 


OR : 


ON ^ 


2006/04/07:18:34;; 




























; EPO; JPO;: 
DERWENT; 
IBM.TDB : 
































S21 
7 


93 


S215 and (communication near4 
availab$5) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/04/07 18:50 


S22 : 




((separate private i cledjeajted) ;= ■= 
i!Hear2:(thanneiiti£^ 
;;connectiqn)) same ■ "%' 
^((communication; system 
;:funct|ph$6> niear4 (availab$5 i : 
; isolat$3 cut) with (important : 
^critical)): 


iiUS-PGPyB; 
USPAT; . 
USOCR;i: : 
EPO: JPO: 
DERWENT; 

ibmjtdb;: : 


,OR; .•./:;:; 


;0N 


; : 2006/04/p7;i9:p2 : 


S22 
2 


1 


( M 6501752").PN. 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/10/03 14:03 


! ;S2 : 2': : : 

lllllll 




((intru$4 neari detect$3) or 
denial-of-service or (denial near2 
service)) and cisco.as. 


US-PGPUB; 
USPAT 


OR ; ; 


Hill 


2005/10/03 15:19 


S22 
4 


49 


S223 and (@ad< M 20000907 M or 
@rlad<"20000907") 


US-PGPUB; 
USPAT 


OR 


ON 


2005/10/03 14:25 


S22 


, 6' 


: S224 arid director a nd Censor 


US-PGPUB; 

USPAT;;;! 


OR 


ON 


2006/04/07 19:05 


S22 
6 


41 


S224 and ((separate private 
dedicated internal) near2 (channel 
network path line connection)) 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/07 19:10 


S22 ^ 

7'.:;-: 


:: i : :'o: : 


S224and;(^ 

; emergency) near2 (channel ; : 
network path line connection)) \ 


: US-PGPUB; : 
; USPAT ; ; 


OR 


ON p 


!2d05/10/03 15il9 


S22 
8 


59 


S214 and ((redundan$2 
emergency) near2 (channel 
network path line connection)) 


US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2006/04/07 19:14 
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S23 


50 


US-5796956-$.DID. OR 


US-PGPUB; 


OR 


ON 


2005/10/03 18:38 


1 




US-6061341-$.DID. OR 


USPAT; 












US-6061789-$.DID. OR 


USOCR; 












US-6108782-$.DID. OR 


EPO; JPO; 












US-6279113-$.DID. OR 


DERWENT; 












US-6321338-$.DID. OR 


IBM_TDB 












US-6353385-$.DID. OR 














US-6370116-$.DID. OR 














US-6388992-$.DID. OR 














US-6389448-$.DID. OR 














US-6442694-$.DID. OR 














US-6535484-$.DID. OR 














US-6597661-$.DID. OR 














US-6597957-$.DID. OR 














US-6678827-$.DID. OR 














US-6691213-$.DID. OR 














US-6725378-$.DID. OR 














US-6738814-$.DID. OR 














US-6775657-$.DID. OR 














US-6789203-$.DID. OR 














US-6807667-S DID OR 














lie £Qicoin i run r\o 














US-6848005-$.DID. OR 














US-6304262-$.DID. OR 














US-6301668-$.DID. 










•S2 : i;:. 


.■ i; "': :, |j»i: :: ;4:! 


"20020031134" or "20020035628" 


US-PGPUB 


; PR } ; 


::on : ^:; : ;; 


2005/10/63 18:1^1 


,2: 




br; '70020095492" or - ; 














i f'2d020i039i6'' ;l 










S23 


1 


("6381649").PN. 


US-PGPUB; 


OR 


OFF 


2005/10/03 18:43 


3 






USPAT 










: . '. ■ l.-i ;: 

::::::::::::::::::::::: i::: 


: : /tffi71 £7fO"-V ON : 
\ O/ JJ/UZ y.rlM., 


: 1 IC DCDI IP' 


UK 


rice : 

Urr ;; 


j 2005/10/03 18:43 








i USPAT ; : 












Rft 
OD 


A^ An /! aa" ai» 

{ ueniai or service or 


1 IC D/""DI ID* 

Ub-rorUb, 


UK 


UN 


2006/04/07 19:20 


c 
3 




a a a ■ ^ Iff 1 rtflr 1 /*■ An / 1 r*r\ ai* / ■ a4*»>i iirQ 

aeniai$j.or$.L service or (intru^j 


1 1CDAT< 

UbrA 1 ; 












near aetectipjjj same ^ collector or 


ErU, JrU, 












snanf r j m c a/**4" a k a»» "3 1 ■ ^ 4" a ►* a** 

agent or inspector or actuator or 


UtKWtlN 1 / 












sniffer) 


IBM TDB 








cm 


• i' OQ ■ 


oz^d ana \Aajaa< - zuuuuyu/:; or: : : : :: 




UK 


:: /"MVI :::::::::: 


|2606/04/p7 19:22 ; 


ft 




iv^nauv zuuuuyu/ j ; 


1 ICDAT» 

UbrAi; 














CrU/JrUy:::: 














DfcKWblM 1 , : 














.;IBM_TpB 










S23 


38 


("denial of service" or 


US-PGPUB; 


OR 


ON 


2005/10/04 12:28 


8 




denial$lof$lservice or (intru$3 


USPAT; 












near detect$3)) same ((redundant 


EPO; JPO; 












or private or dedicated) near3 


DERWENT; 












(network or line or channel or 


IBMJTDB 












tunnel)) 
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S23 
9 


27 


S238 and (@ad< M 20000907 M or 
@rlad< M 20000907") 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 

1UI 1 1 La/La* 


OR 


ON 


2005/10/04 14:57 


:S24 ; ; 




:i f :dehiaI.of ISeiVie^Fbr;:; =ii. 
^ehial$io^iservice same 


^US^GPUB;!: 
USPAT; :: 
:EPO; JPO; •= 


:;OR;f-;- : :=: 


:G)N •:; j 


-2005/10/04 14:47 


: : :: .:-;:.29: 






. (collector pr agent) : ;i 












DERWENT;; 
IBM TDB 

::1UI . 1-^: 1: L/LS: :::::: 








S24 
1 


17 


((intru$4 near2 detect$3) or 
denial-of-service or "denial of 
service") same bucket 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2005/10/04 14:55 


S24 

;;6 : : 


•\;.:|5 


;;("denial of service"; or : ■= 
= j d^ehiaj $ Xdrf$i : ^iVic^)i = Sa rine ; : 
^ (colledtpripr agent or sensor ory i; 
inspector; ^ . 


iUS-PGPUB; 
ilUSP^T; ':!•::!; 
iiEPOj JPO; :. 
^DERWENT; 
IBM TDB 




Mil 


: ; 2005/1^/04 14:58:i 


b^4 
7 


0 


5246 and (@ad< 20000907 or 
@rlad< n 20000907") 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2005/10/04 14:58 


S24 


lllllllll 


(((713/150-153,-; : ; (; ; 


US-PGPUB; 


■;6r':--- - :: 


ON ; : 


1200^04/07 19:47 j 


8 




188;726/22-25;709/224.ccls. and 

((collect$3 or audit$3 or log$4 or 
i; monitor$3) near3 (network or : ; 

traffic or secur$3 pr;statistic$2 or 

count or packet)) ) ind ("denial of ; 
| sen/ice" ordenia!$ipf$lservice or 
i (intru$4 ne|^H2 d^tect$))) arid 

(collector or agent or inspector or -; 

actuator)) and (@ad<"20000907" 

or @riad<"20000907") 


USPAT 






S25 
0 


1739 


713/150-153, 

188;726/22-25;709/224.ccls. and 
((collect$3 or audit$3 or log$4 or 
monitor$3) near3 (network or 
traffic or secur$3 or statistic$2 or 
count or packet)) and 
(@ad<"20000907" or 
@rlad<"20000907") 


US-PGPUB; 
USPAT 


OR 


ON 


2005/10/05 11:01 


S25 




:;S250:and^((b^ nearS: ^ : 
r(co(ribin$3!of diyid$3 or £j)iit$4) : 
:;with[(thr^hpld ■;. ;!i;j: 


US-PGPUB- • 


TOR:! 'K:::;^' 


\ ON : -i •; 


2006/04/07 21-47 ^ 


S25 
2 


0 


S250 and ((IP near3 fragment$5) 
with ("denial of service" or 
denial$lof$lservice)) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/10/05 11:04 
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S25 
3 


13 


S250 and ((IP near3 fragment$5) 
with packet$) 


US-PGPUB; 
USPAT 


OR 


ON 


2005/10/05 11:04 


S25: : : 




i:bucket;withittireshold:^ 


i uS-PGlUiB; : 


;QrV ■{ ' 


ON..L ■ 


'. j; 2006/04/07 ;21:48;: 


4; ;; ' 




(c6rhbjri$3 or divid$3 1 brsp||t$4) : . : 
same packet . 


iiUSPAT; ;; : ; 

•USOCR;- 

EPO;;aPO; 

DERWENT; 

IBM_TDB 




S25 
5 


1 


("6321263").PN. 


US-PGPUB; 
USPAT 


OR 


OFF 


2005/10/07 19:48 


: S25 :: 

• 6 


!204i 


polettb.in. or kohler.in; . : . 


US-PGPUB; 
USPAT: , 


: OR. ,.. 


iON I : 


I ;i;2005/10/07 19:50 


S25 
7 


19 


S256 and denial and collector 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/07 21:51 


• : S25 ! ^ 

S26 
1 


: : lV 
11518 


' ("632p38"|;P^| : I 1 

((intru$4 near2 detect$3) or 
denial-of-service or "denial of 
service") 


US-PGPUB; 

uspat ;i: 

US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 
OR 


PFF :: - : ! 

ON 


\ 12005/10/07 20i6l 
2006/04/07 18:34 


S26 H 

2 :i ji 


jl 6021 


S261 and (@ad<"20000907" or ,T 
@rlad<"20000907")- 1 


US-PGPUB; 
USPAT; 
USOCR; , 
EPO; JPO; : 
•DERWENT; 
IBM_TDB 


OR 


ON 


2006/04/07 18:34 


S26 
3 


651 


S262 and ((separate private 
dedicated internal) near2 (channel 
network path line connection)) 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/04/07 18:34 


; S26 : 

::.4V: : - 


■ : 38 


! ;S263 and ((data near3 collect$3): '..q 
(with (packet traffic)) . 


US-PGPUB; 
USPAT; 
USOCR; 
; EPO; JPO; 
DERWENT;- : 
IBM TDB 


OR j 


ON 


■2006/04/07 18:35 


S26 
5 


103 


S263 and (communication near4 
availab$5) 


US-PGPUB; 
USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM TDB 


OR 


ON 


2006/04/07 18:51 
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S26 

0 


16 


((separate private dedicated) 
near2 (channel network path line 
connection)) same 
((communication system 
function$6) near4 (availab$5 
isolat$3 cut) with (important 
critical)) 


US-PGPUB; 

1 ICBAT. 

USPAT; 
USOCR; 
EPO; JPO; 
DERWENT; 
IBM_TDB 


OR 


ON 


2006/04/07 19:02 


:;S26 

■ 


Jk .81 : 


((intru$4 near? detect$3) or 
deiiial-of-service or (denial hear2 v : 


US-PGPUB;- 
USP7VT ; M 




ON :-: 


^2006/04/07 19:05 i 
















S26 
8 


55 


S267 and (@ad<"20000907" or 
@rlad<"20000907") 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/07 19:05 


;: : S26-: 
9 


_■" ::;: :::: J;^ 


; S268;and director and sensor 


US-PGPUB; 
USPAT : ;j ■! 


rOR-f";;' 


ON : | 


2006/04/07 19:05 


S27 
0 


45 


S268 and ((separate private 
dedicated internal) near2 (channel 
network path line connection)) 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/07 19:10 


S27 




: ; S262 a nd : ((red u nda n$2 jji !;;; 
emergen^) ;n<^^ 
network path Hri^ eonn^rtiori))^ ^ 


US-PGPUB; 
uspat; ;^ 
USOCR; 
EPO; JPO;: W 

bERWENT; 
JBM JTJB;: 


OR 


!6n:;:;.;: ; : 


2006/04/07 19:14; 


S27 
4 


189 


((denial near3 service) or 
denial$lof$lservice or (intru$3 
near detect$3)) same ((collector 
or agent or inspector or actuator 
or sniffer or probe or sensor or 
monitor) with (packet traffic)) 


US-PGPUB; 
USPAT; 
EPO; JPO; 
DERWENT; 
IBM.TDB 


OR 


ON 


2006/04/07 19:22 


'5: ••; ::. 


" : 32 : 


;;5274 ahd;(@ad< n 20000^d7' , ior 
@rlad< , 20pop9p7 n ): 


us-pgpubF 

USPAT; 
EPO; JPO; X 
DERWENT 1 

ibm_tdb; 




ON : 


1 2056/04/07 19:23 


S27 
6 


3444 


713/150-153, 

188;726/22-25;709/224.ccls. and 
(@ad<"20000907" or 
@rlad<"20000907") 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/12 09:43 


S27 


: 610 


S276 arid (fcbilect$3 sriiff$3 - 
prob43;sensor$3 mpnitor$3 : : 
■. \ sea ni4Y i riea r4 f backet traffic:)) ^ 


•US-PGPUB' 

USPAT ;: 


: OR 

: : ,\i/r\ :::::::::::::::: 


; ON 

: : V/I:Y:: 


•2006/04/07 1Q-«;i : 


S27 
8 


47 


S277 and ((denial near3 service) 
or denial$lof$lservice or (intru$3 
near detect$3)) 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/07 19:53 


S27 V 

;:9;: ; H ::'; 


J:l;;;: : M;38j 


:;Sg7pQt;S^ 


US-PGPUB; 

: US>ATV: : •«;! 






;;;2Q06/04/Q7 2^?7 


S28 
0 


l 


("20020019945").PN. 


US-PGPUB; 
USPAT 


OR 


OFF 


2006/04/07 21:35 
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bio 

1 


u 


S277 and ((bucket buffer) nearS 
(combin$3 or divid$3 or split$4) 
with (threshold or limit)) 


Ub-PorUB, 
USPAT 


UK 


ON 


200D/LH/07 Zl.47 


S28. 




ibuckefcwith ^ : ; : . 
! ;(cpmbin$3.or diyid$3! or split$4) :: : 


: US-PGPUB; • 

USPAT;P::H 












:: ^ahnip ; nprkpt- ::::::;::::::::::::::::::::::::::::::::: : ::: ' ::::::: : : 














:EPO; JPO;:;i 
iDERWENT; 
IBM_TDB 








S28 
3 


2105 


poletto.in. or kohler.in. 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/07 21:51 


'\ii8--.: 




^S283arid denial :and col lector 


: US-PGPUB ;: 
USPAT 


OR 

::\xr\-.::::::::::: 


qm!; ! 

::Vl:i.:::::::::: 


1 1 1 20 06 /04 707 21 ■ 5 2 

: : .Cm WW/. VTT/: V /; : £ J. ■ J £• : : 


S28 
5 


3459 


713/150-153, 

188;726/22-25;709/224.ccls. and 
(@ad<"20000907 M or 
@rlad<"20000907") 


US-PGPUB; 
USPAT 


OR 


ON 


2006/04/12 09:43 


S28 

: 6>, 




: S285:and((collect$3 sampl$3- ; 
:m0nftor^ 

(date iriformatiori packet traffic) 
same "eyery : nth; packet M ); : 


US-PGPUB; 
USPAtp == 




Ok; 


•2^/04/14:16:49; 


S28 
7 


9 


(collect$3 sampl$3 monitor$3 
prob$3 sensor$3) with (data 
information packet traffic) same 
"every nth packet" 


US-PGPUB; 

USPAT; 

USOCR; 

EPO; JPO; 

DERWENT; 

IBM_TDB 


OR 


ON 


2006/04/12 09:44 


S29 

• 2; h ' 




(((collect^3 sampl$3 ^ mbhrtor$3i ; 
arid (packet traffic) an#(attack 
in : tru$3 denial) and bucket and 
thre^hold and (cbmbin$3 divid$3) 
and (redundant (fault near2 
toleran$2)))).clm, 


^US-PGPUB: 


:OR ;:: 


ON;: ; 


2006/04/14 16:57 
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